Crypto risk monitoring on August 27 is dominated by exchange wind-downs, unresolved withdrawal and creditor issues, a new Seychelles regulatory warning, and two security incidents that remain under active recovery or on-chain monitoring.
The highest-risk cases remain BitMart and AscendEX, where the central questions are no longer simply about trading access. They concern creditor treatment, withdrawal execution, claims administration and whether restructuring efforts can preserve customer value.
Elsewhere, BitMEX has entered the final phase of its orderly shutdown, WOO X faces a fresh jurisdiction-specific warning from the Seychelles FSA, aelf remains in controlled recovery after a node-execution security incident, and most of the bitcoin attributed to the Coldcard wallet exploit is still sitting in attacker-controlled addresses.
This brief summarizes the eight developments CEXVia is tracking most closely today and links to the full analysis for each event.
Today's highest-priority alerts
| Risk | Event | Why it matters |
|---|---|---|
| Critical | BitMart restructuring | Trading has stopped, a restructuring roadmap is due by September 9, and the treatment of customer balances and creditor claims remains unclear. |
| Critical | AscendEX claims and insolvency risk | Withdrawals are suspended, a claims portal is being prepared, and the exchange is considering both rescue options and formal insolvency. |
| High | BitMEX shutdown | The exchange is now in reduce-only mode ahead of a full trading shutdown on September 23. |
| High | WOO X Seychelles warning | The Seychelles FSA says WOOTECH Limited Corp has no current Seychelles nexus and has never been authorized under the country's VASP Act. |
| High | aelf network recovery | Block production and transaction submission remain restricted while node credentials, runtime boundaries and ledger continuity are reviewed. |
| Critical | Coldcard wallet exploit | Roughly 1,561 BTC attributed to the attack remains unmoved, making attacker-wallet activity a major on-chain watch item. |
| High | WebSea withdrawal restoration | The exchange says automatic withdrawals are back, but independent evidence of full normalization is still limited. |
| Medium | SEC custody rule | A new custody rulemaking explicitly covering crypto assets entered White House OIRA review on August 25. |
1. BitMart: restructuring now matters more than the original shutdown
BitMart reached a major milestone on August 26 when spot, futures and other trading services stopped under its previously announced wind-down plan.
The risk picture has since become more complex because the exchange is no longer discussing only an orderly closure. It has also introduced a potential restructuring that could include creditor distributions and a phased restart of selected operations.
That shift raises several unresolved questions:
- how customer balances will be treated;
- whether withdrawals are being processed consistently;
- whether customer assets are segregated;
- what recovery framework will apply to creditors;
- and whether any restart would be supported by verifiable liquidity.
The next major disclosure is expected by September 9, when BitMart has said it aims to publish a further restructuring roadmap.
Read the full analysis: BitMart Restructuring 2026: Withdrawals, Creditor Claims and the September 9 Roadmap
2. AscendEX: the key issue is now recovery value
AscendEX remains one of the most serious centralized-exchange risk cases currently under review.
The platform says normal operations and customer withdrawals have been suspended since July 1. It is converting its main website into a claims portal and has said it is pursuing two paths in parallel: a rescue or recapitalization transaction, and preparation for a possible formal insolvency process.
The critical unknown is not whether users can trade. They cannot. The important question is what percentage of customer claims can ultimately be recovered.
AscendEX has not published enough information to calculate that figure. There is no complete public statement of liquid reserves, customer liabilities, encumbered assets or claim priority.
The initial Claims Portal is targeted for September 5, which should provide better account-level visibility but will not by itself establish the final recovery percentage.
Read the full analysis: AscendEX Shutdown 2026: Claims Portal, Withdrawals and Insolvency Risk
3. BitMEX: orderly shutdown, but execution risk is rising
BitMEX has now entered the reduce-only stage of its closure.
From August 26 until September 23, users can reduce or close positions but cannot open new exposure under the wind-down restrictions. On September 23 at 04:00 UTC, all exchange trading is scheduled to stop and remaining positions will be force-closed.
The Seychelles FSA has described the process as a voluntary wind-down rather than an enforcement action or confirmed insolvency.
That makes BitMEX different from AscendEX or BitMart, but users still face practical risk from declining liquidity, forced position settlement and reduced withdrawal infrastructure after closure.
Read the full analysis: BitMEX Shutdown 2026: September 23 Closure, Forced Positions and Withdrawals
4. WOO X: new Seychelles regulatory warning
The most important new regulatory alert today is the Seychelles FSA warning concerning WOO X.
The regulator says WOOTECH Limited Corp does not currently have a legal or operational nexus to Seychelles and has never been authorized under the country's Virtual Asset Service Providers Act.
This should be interpreted carefully.
It does not mean WOO X has been declared globally unlicensed or banned. The warning is jurisdiction-specific and concerns Seychelles authorization and representations linked to that jurisdiction.
WOO X's own current terms identify WOOTECH Limited Corp as its operating entity, and earlier company disclosures describe that entity as incorporated in Panama.
The next thing to watch is whether WOO X publishes a direct response or changes any legal-entity or regulatory disclosures.
Read the full analysis: WOO X Seychelles Warning 2026: What the FSA Said About WOOTECH
5. aelf: network recovery remains incomplete
aelf remains in controlled recovery after malicious smart-contract activity exposed weaknesses in the boundary between contract execution and node infrastructure.
The project has identified malicious payload capabilities involving host command execution, access to node-related objects and attempted external communication.
No ordinary-user wallet theft has been confirmed, but the incident remains serious because Block Producer and infrastructure credentials may have been exposed.
Before normal service resumes, aelf is working through several recovery gates, including key rotation, clean environment rebuilds, deterministic ledger validation and permanent runtime hardening.
The network should not be treated as fully recovered until the project explicitly confirms the resumption of block production and transaction submission.
Read the full analysis: aelf Network Security Incident 2026: Why Block Production Is Still Paused
6. Coldcard: about 1,561 BTC remains unmoved
The Coldcard wallet exploit remains one of the largest active self-custody security events of 2026.
The latest public tally attributes approximately 1,789 BTC to the exploit, with around 1,561 BTC still unmoved in attacker-controlled addresses.
That makes those wallets an important on-chain watch item.
The original weakness affected seed generation rather than transaction signing. Some vulnerable seeds were created with insufficient entropy because affected firmware did not use the intended hardware randomness path.
The attack therefore did not require physical access to the device.
A key point for users is that installing fixed firmware does not make an already vulnerable seed safe. Where applicable, users must generate a new secure seed and migrate funds.
Read the full analysis: Coldcard Hack Update 2026: About 1,561 BTC Still Unmoved After Wallet Exploit
7. WebSea: withdrawal restoration still needs independent confirmation
WebSea says automatic withdrawals were restored on August 24 after months of restrictions, asset audits and restructuring.
That is a positive development, but the platform's own earlier statements acknowledged structural liquidity pressure and said withdrawal recovery depended on strategic investment and capital injection.
The key issue now is durability.
CEXVia has not yet identified enough independent evidence to confirm normal withdrawal processing across asset types, account sizes and user groups.
A stronger recovery case would require sustained withdrawal success, clearer reserve and liability data, and evidence that the financing behind the recovery is sufficient to avoid another restriction cycle.
Read the full analysis: WebSea Withdrawal Update 2026: Has the Exchange Really Restored Withdrawals?
8. SEC crypto custody rule: a new proposal is moving toward publication
A new SEC rulemaking titled Amendments to the Custody Rules entered White House OIRA review on August 25.
The proposal is important because the SEC's regulatory agenda explicitly says it is intended to address custody of crypto assets by investment advisers and investment companies.
The rule has not yet been published, and no new custody requirement is currently in force because of the OIRA review.
It is also important not to confuse this with the SEC's 2023 Safeguarding Advisory Client Assets proposal. That earlier proposal was withdrawn in 2025. The current project, under RIN 3235-AN46, is a new rulemaking path.
The next major milestone will be release of the actual proposal, currently targeted for around October 2026.
Read the full analysis: SEC Crypto Custody Rule 2026: What the OIRA Review Means for Advisers and Funds
What CEXVia is watching next
The most important near-term dates and triggers are:
- September 5: targeted launch of the AscendEX Claims Portal;
- September 9: expected BitMart restructuring roadmap;
- September 23: BitMEX trading shutdown and forced closure of remaining positions;
- any material movement from Coldcard attacker wallets;
- an official WOO X response to the Seychelles FSA warning;
- formal aelf confirmation that block production and transaction submission have resumed;
- evidence that WebSea's restored withdrawals remain stable;
- completion of OIRA review and publication of the SEC custody proposal.
CEXVia daily risk view
The current risk environment is being driven less by broad market volatility and more by operational continuity, withdrawal access, legal-entity clarity, infrastructure security and custody rules.
The two most serious exchange-specific cases remain BitMart and AscendEX because both involve unresolved questions about liabilities and customer recovery.
Coldcard remains the most important wallet-security watch because a large amount of stolen bitcoin is still dormant and could move at any time.
WOO X is the most important new regulatory development because the Seychelles warning is fresh, official and specific.
CEXVia will continue tracking these events as they develop and update the underlying detail pages when new verified information becomes available.
*This brief is for informational purposes only and does not constitute financial, legal or investment advice.*